Outdated vulnerable version of 7z.exe embedded in Vortex as of right now

[Aldao444]

My AV complains hard about this. It is also a well known vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-11477

[Pickysaurus]

Do you definitely have the latest version of Vortex? I'm pretty sure we did and update to 7z a while back now. 

[showler]

Might it be related to this: 

 

[Lacythecow]

ive been spanked for just trying to comunicay i got everthing working exept nsfws working im really sorry to the communty was the straw camel on the backplease just be reasononablable your not accessable thru site mail kind of blocked i can follow you but cant send direct message im just saying sorry even though through my wining got modders a raise just like many other people am i a rookie anymore.

[Tannin42]

1 hour ago, Pickysaurus said:

Do you definitely have the latest version of Vortex? I'm pretty sure we did and update to 7z a while back now. 

Yes, a while back. The last 7z update was over a year ago (based on github history). This vulnerability has been published last week.

So yes, I agree with the OP, Vortex is probably affected by this.